Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: K/PTEME/mh0EFUjFmRU0Is8sFCujxyQ0lBaU2z93yrY=
Subject key identifier: BE:3B:22:6C:46:50:82:2D:6D:27:5B:07:9E:C0:B5:D8:8D:86:04:5A
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 01967FEABFEDAE84B19AE2F15B825C251E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 0F0F
Signing time: Tue 29 Apr 2025 05:00:12 +0000
Manifest this update: Tue 29 Apr 2025 05:00:12 +0000
Manifest next update: Wed 30 Apr 2025 05:00:12 +0000
Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: H4jabNpMd4zGygmdIoQ9hoputcC41F1ZbtCD3NPVrYs=)
2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:bf:ed:ae:84:b1:9a:e2:f1:5b:82:5c:25:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Apr 29 05:00:12 2025 GMT
Not After : Apr 30 05:00:12 2025 GMT
Subject: CN=be3b226c4650822d6d275b079ec0b5d88d86045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:57:d5:53:39:8b:1e:72:79:a7:66:32:3b:
f2:d5:a3:b0:cc:a0:7f:a2:f4:1f:44:78:64:d3:15:
84:7c:51:b6:6f:23:21:54:17:bb:ce:40:3d:11:b9:
54:90:93:86:09:9c:26:80:29:63:95:25:e9:41:07:
80:53:bf:7f:a1:05:69:60:76:e0:60:84:7e:e2:72:
46:21:c4:45:f6:82:a4:39:08:fb:b3:64:5d:93:f2:
8e:50:2d:c1:a1:27:cb:42:91:ed:0a:7c:d0:62:3c:
c8:69:1e:f1:21:ef:f0:88:9a:89:12:28:ff:4e:ba:
fa:55:ba:84:26:4c:3d:e6:e1:ea:97:69:81:da:55:
37:e7:6f:b8:47:21:a4:ed:7c:76:39:01:73:61:2b:
ac:e9:9e:fd:0a:3d:0d:dc:73:a6:d3:db:dd:4d:77:
d7:51:4d:9b:35:86:a0:13:43:91:43:17:0d:f3:20:
e6:4b:53:f3:f9:f0:9a:c2:ad:16:58:f0:b5:85:af:
0b:70:40:8d:6c:30:0e:c9:75:60:01:2d:23:c7:55:
b1:0e:c9:62:54:96:d4:bf:68:c9:17:23:d2:22:15:
fc:8f:25:71:e7:a8:41:67:b0:94:16:a9:fa:10:34:
92:94:c1:58:a4:3f:a5:89:b4:b3:c3:b8:8a:b7:17:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:22:6C:46:50:82:2D:6D:27:5B:07:9E:C0:B5:D8:8D:86:04:5A
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:59:17:ac:24:d2:91:52:54:e2:2e:a7:33:69:c0:79:4d:
6b:e8:8d:3e:35:05:ee:59:07:c2:99:95:db:be:ac:2c:22:f6:
37:d4:7f:e8:4f:66:2a:41:30:17:0c:0d:65:cf:df:0c:87:5c:
9c:29:2c:77:32:b1:0b:5c:d4:37:c0:6e:50:ea:c4:7f:26:67:
9f:28:74:20:ea:9c:9d:4b:54:f1:a4:be:04:e3:e1:25:91:32:
0e:2e:9d:cf:07:16:0b:62:8c:5e:f8:16:23:91:1c:7a:2b:e5:
61:ff:2d:d2:99:5f:b0:51:30:2b:37:65:00:01:41:a1:63:ce:
4c:19:8a:43:58:76:90:94:f8:01:b3:fa:e2:fe:a0:0c:5f:55:
c4:28:64:30:28:4b:b5:2c:13:24:a6:7e:97:49:7d:64:f9:e0:
3a:31:47:58:19:7e:05:cc:f5:4b:be:e0:a0:88:63:3b:a7:60:
a4:40:8e:e9:7b:1d:eb:fa:e6:9b:c8:fd:a8:22:61:74:ec:c4:
54:e2:f9:20:e8:75:fa:6b:44:ef:54:a1:90:1d:c0:bc:0d:4e:
6b:9b:92:0f:01:e5:22:04:61:f5:58:e0:4f:c6:e3:9a:21:cd:
99:a8:bf:b7:75:b1:62:2c:1f:72:89:ab:6a:3a:61:c5:d4:87:
10:a1:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:09:47 2025 by rpki-client